565 matches found
CVE-2020-8350
An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege...
CVE-2020-8350
An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege...
Authentication flaw
An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege...
CVE-2020-8350
CVE-2020-8350 affects the Lenovo ThinkPad Stack Wireless Router, firmware 1.1.3.4, via an authentication bypass that could lead to privilege escalation. Public sources (NVD, Red Hat) describe an adjacent-network vulnerability with CVSS v3.1 base score 8.8 (HIGH) and impact on confidentiality, int...
CVE-2020-8350
An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escalation of privilege...
Lenovo ThinkPad Stack Wireless Router Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-48228 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8350 Summary Description: An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router that could allow escalation of...
Lenovo ThinkPad Stack Wireless Router Vulnerability - Lenovo Support US
No description provided...
CVE-2020-8341
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...
CVE-2020-8341
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...
CVE-2020-8335
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorize...
CVE-2020-8335
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorize...
Code injection
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...
Design/Logic Flaw
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorize...
CVE-2020-8341
The CVE-2020-8341 entry concerns Lenovo ThinkPad BIOS/System Management Mode (SMM) protection. After resuming from S3 sleep on various BIOS versions, SPI Protected Range Registers (PRx) may not be set, but this does not undermine SMM BIOS Write Protection. The vulnerability centers on the PRx sig...
CVE-2020-8341
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...
CVE-2020-8335
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorize...
CVE-2020-8335
The CVE-2020-8335 issue concerns Lenovo ThinkPad BIOS tamper detection not triggering when the emergency-reset button is pressed, potentially allowing unauthorized access. Affected models include ThinkPad A285/A485/T495/T495s/X395, with specific BIOS versions up to r0xuj70w, r0wuj65w, r12uj55w, a...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-36230 Potential Impact: Escalation of privilege or denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0559 Summary Description: Intel reported potential security vulnerabilities in Intel PROSet/Wireless WiFi Software that may all...